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I. Basis of the report 



1. With regard to the elements of the international application:* 
the international application as originally filed. 

as originally filed 
__, filed with the demand 
filed with the letter of _ 




iginally filed 

as amended (together with any statement) under Article 19 
filed with the demand 

filed with the letter of . 



as originally filed 
, filed with the demand 
filed with the letter of _ 

j | the sequence listing part of the description: 

pages NONE l as originally filed 

Daees NONE , filed with the demand 

filed with the letter of_ 



2. With regard to the language, all the elements marked above were available or furnished to this Authority in the 
language in which the international application was filed, unless otherwise indicated under this item. 

These elements were available or furnished to this Authority in the following language which is: 

| the language of a translation furnished for the purposes of international search (under Rule23. 1(b)). 
| the language of publication of the international application (under Rule 48.3(b)). 

| | the language of the translation furnished for the purposes of international preliminary examination(under Rules 
55.2 and/or 55.3). 

3. With regard to any nucleotide and/or amino acid sequence disclosed in the international application, the 
international preliminary examination was carried out on the basis of the sequence listing: 

| contained in the international application in printed form. 

| filed together with the international application in computer readable form. 

| furnished subsequently to this Authority in written form. 

[ furnished subsequently to this Authority in computer readable form. 

| | The statement that the subsequently furnished written sequence listing does not go beyond the disclosure in the 
international application as filed has been furnished. 



[ | The statement that the information recorded in computer readable form is identical to the written sequence listii 

has been furnished, 
k [X] The amendments have resulted in the cancellation of 

[X] the description, pages None 

[X] the claims, Nos. None 

[X] the drawings, sheets/fig- None 
). O This report has been established as if (some of) the amendments had not been made, since they have been considered to go 

beyond the disclosure as filed, as indicated in the Supplemental Box (Rule 70.2(c)).** 
< Replacement sheets which have been furnished to the receiving Office in response to an invitation wider Article 14 are referred to in 
his report as "originally filed" and are not annexed to this report since tfiey do not contain amendments (Rules 70.16 and 70.17). 
** Any replacement sheet containing such amendments must be referred to under item 1 and annexed to this report. 
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V. Reasoned statement under Rule 66.2(a)(ii) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 

1. STATEMENT 

Novelty (N) 



Inventive Step (IS) 



Industrial Applicability (IA) 



2. CITATIONS AND EXPLANATIONS 
Please See Continuation Sheet 



Claims 2-10.12,13,15-18.20.21,23-25,27 and 28 

Claims 1. 11, 14, 19,22,26,29-49 

Claims 4.7.9,10,12,13.20,21,25,27 and 28 

Claims 1-3. 5. 6, 8. 11. 14-19. 22-24. 26 and 29-49 

Claims L49 . 

Claims NONE . 
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International application No. 
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V. 2. Citations and Explanations: 

Claims 1, 11, 14, 19, 22, 26 and 29-49 lack novelty under PCT Article 33(2) as being anticipated by Matyas et al 
(5,201,000; hereinafter Matyas). 



Regarding claims 1,11, 14, 19, 22, 26, 29 and 36, Matyas discloses a method for managing a public key cryptographic 
system which includes a public key, private key pair generator (abstract). Matyas further discloses generation of a specific public key 
pair for the purpose of authentication (col. 20, lines40-67; col. 22, lines 45-66). Matyas also discloses the generated keys are 
transported or transmitted to a receiver (col. 3, line 43-col. 4, line 51; col. 17, lines 4-18). Matyas discloses data processors for 
processing cryptographic services and usage of random numbers as nonces in authentication protocols (col. 8, lines 58-65; col. 14, 
lines 61-65). This provides a capability for using a second public key for authentication if a first public key fails. 



Regarding claims 30-33, 37-40 and 43-47, Matyas discloses a cryptographic facility (CF) that receives data parameters and 
encryption key to produce a new set of encrytion keys (col. 9, lines 14-65). Matyas further discloses that the produced public key are 
used for authentication purpose (col. 20, lines 41-67). Matyas also discloses the use of a counter or a sequence number in the 
production of the public key set (col. 9, lines 60-66, col. 15, lines 4661). Matyas discloses data processors for processing 
cryptographic services and usage of random numbers as nonces in authentication protocols (col. 8, lines 58-65; col. 14, lines 61-65). 
This provides a capability for using a second public key for authentication if a first public key fails. 

Regarding claims 34, 35, 41, 42, 48 and 49, these claims are rejected as applied to like elements of claims 30-33 and 
furtrher the following: 

Matyas discloses a technique for selecting a randum number for the purpose of generating a public key set by testing large 
numbers for primality (col. 13, lines 18-39). This technique is based on the randum number raised to a power chosen from the same 
series of values that contains the selected randum number. 



Claims 2, 3, 5, 6, 8, 15-18, 23 and 24 lack an inventive step under PCT Article 33(3) as being obvious over Matyas et al 
(5,201,000; hereinafter Matyas) in view of Brennan et al (5,675,649; hereinafter Brennan). 



Regarding claim 2, 15 and 23, Matyas does not expressly disclose the creation of two shares of a public key. Brennan, 



Form PCT/IPEA/409 (Continuation Sheet) (July 1998) 



INTERNATIONAL PRELIMINARY EXAMINATION REPORT 



International application No. 
PCT/US03/41538 



Supplemental Box 

(To be used when the space in any of the preceding boxes is not sufficient) 



however, teaches that a key is split into shares and each share is given to an agent (see, for example, col. 4, lines 45-520). It would 
have not involved an inventive step at the time the invention that to include the process of splitting the keys into shares as taught m 
Brennan in Matyas, because it would requires a minimum number of agents to be present in order to reconstruct the key (Brennan, 
col. 3, lines 48-55). 



Regarding claims 3, 5, 6, 8, 16-18 and 24, Matyas discloses that different types of public key, private key pairs are 
generated and re-generated by a key generator and transported or transmitted to a receiver (col. 3, lme 43-col. 4, line 51; col. 17, 
lines 4-18). Matyas discloses that a passphrase is used to generate a second type of the public key, private key pairs (col. 4 lines 33- 
51). Thus, the generated private keys of the second type are associated by the passphrase. Matyas discloses data processors tor 
processing cryptographic services and usage of random numbers as nonces in authentication protocols (col. 8, mes 58-65; col. 14, 
lines 61-65). This provides a capability for using a second public key for authentication if a first public key fails. 

Claim 4 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "disabling 
the first private key when the second private key is used for authentication". 

Claim 7 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "disabling 
use of the second private key for authentication; and re-creating the second private key and using the second private key tor 
authentication". 



Claims 9 and 10 meet the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest 
"disabling use of the second private key for authentication; and using the third private key for authentication . 

Claim 12 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "receiving 
a third public key associated with the second public key, if the first public key fails and if the second public key results in a successful 
authentication". 

Claim 13 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "receiving 
a third public key and a fourth public key associated with the second public key, if the first public key fails and if the second public 
key results in a successful authentication" . 

Claim 20 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "means for 
receiving a third public key associated with the second public key, if the first public key fails and if the second public key results in a 
successful authentication". 

Claim 21 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "means for 
receiving a third public key and a fourth public key associated with the second public key, if the first public key fails and if the second 
public key results in a successful authentication". 

Claims 25 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "a set of 
code segments for disabling the first private key by using the second private key for authentication". 

Claim 27 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "a set of 
code segments for receiving a third public key associated with the second public key, if the first public key fails and if the second 
public key results in a successful authentication". 

Claim 28 meets the criteria set out in PCT Article 33(2)-(3), because the prior arts do not teach or fairly suggest "a set of 
code segments for receiving a third public key and a fourth public key associated with the second public key, if the first public key 
fails and if the second public key results in a successful authentication". 
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Claims 4, 7, 9, 10, 12, 13, 20, 21, 25, 27, 28, meet the criteria set out in PCT Article 33(4), and thus meet industrial 
applicability because the subject matter claimed can be made or used in industry. 

NEW CITATIONS 
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